| 摘要 |
A method and a corresponding device for authenticating a user for access to protected information, the method comprising generating a behavioral user profile associated with a first user known to be a legitimate user of the protected information, obtaining from a second user, using a behavioral input device associated with a second computing device, a behavioral user sample, storing the behavioral user sample, associated with the second user, in a temporary user profile, comparing the behavioral user sample of the second user to the behavioral user profile, and if the behavioral user sample does not match the behavioral user profile contacting the legitimate first user and receiving from the legitimate first user information regarding the legitimacy of the second user and based on the information received from the first user, providing a response to the second user and updating the user profile. |
| 主权项 |
1. A method for authenticating a user for access to protected information using at least one computing device, the method comprising:
obtaining, a behavioral input data from a first user, using at least one behavioral input device associated with a first computing device used by said first user, uploading at least a version of a portion of said behavioral input data to a behavioral server, generating a behavioral user profile using said version of said portion of said behavioral input data, and storing at said behavioral server said behavioral user profile associated with said first user known to be a legitimate user of said protected information; when authenticating a second user, obtaining from said second user, using a behavioral input device associated with a second computing device used by said second user, a behavioral user sample associated with said second user; uploading at least a version of a portion of said behavioral user sample to said behavioral server, and generating a temporary user profile using said version of said portion of said behavioral user sample, and storing said temporary user profile comprising said version of said portion of behavioral user sample, associated with said second user, at said behavioral server; at said behavioral server, comparing said temporary user profile associated with said second user to said behavioral user profile associated with said first user of said protected information; if said temporary user profile matches said behavioral user profile, identifying said second user as said legitimate user, enabling said second user to access said protected information, and updating at said behavioral server, said behavioral user profile associated with said first user with temporary user profile associated with said second user; and if said temporary user profile does not match said behavioral user profile: contacting, using an out of band method, said first user and receiving from said first user information regarding the legitimacy of said second user; and if said first user confirms that said temporary user profile associated with said second user is from a legitimate user of the protected information, adding, at said behavioral server, said temporary user profile to behavioral user profile associated with said first user and flagging said behavioral user profile as a multi user profile; wherein said multi user profile stores a plurality of behavioral modalities of said first user and said second user during a corresponding plurality of user sessions, in a single user profile; wherein said first user and said second user are different individuals. |
